Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a31613a3a2f34382d3634203d3e20323734303633.roa
File:                     323830333a663264303a31613a3a2f34382d3634203d3e20323734303633.roa (raw, json)
Hash identifier:          fd2S65YvZyaPbSm10knfx6RJOhCBIkRVECJU55vYnlg=
Subject key identifier:   21:7C:E8:AC:F5:47:B6:09:7B:0C:20:80:0B:87:95:5A:84:F1:FD:B4
Certificate issuer:       /CN=0024F2646BA42106407316FE59A0CD2A76EF240C
Certificate serial:       3B21A7B966431ED5F6E50A2B78082E7C885B45FD
Authority key identifier: 00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a31613a3a2f34382d3634203d3e20323734303633.roa
Signing time:             Wed 16 Jul 2025 20:30:01 +0000
ROA not before:           Wed 16 Jul 2025 20:25:01 +0000
ROA not after:            Wed 15 Jul 2026 20:30:01 +0000
asID:                     274063
IP address blocks:        2803:f2d0:1a::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Jul 2025 19:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:21:a7:b9:66:43:1e:d5:f6:e5:0a:2b:78:08:2e:7c:88:5b:45:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0024F2646BA42106407316FE59A0CD2A76EF240C
        Validity
            Not Before: Jul 16 20:25:01 2025 GMT
            Not After : Jul 15 20:30:01 2026 GMT
        Subject: CN=217CE8ACF547B6097B0C20800B87955A84F1FDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:e7:0b:fb:e7:16:4a:89:70:9a:4e:45:33:
                    05:8f:a4:b5:d5:a8:9e:af:d8:fa:af:95:31:e7:1d:
                    e0:94:2e:75:fa:a9:3f:80:b9:ab:17:e2:be:27:1f:
                    f9:76:e7:2b:f2:b0:c4:06:9d:55:57:ae:b8:bf:13:
                    57:e1:d3:95:80:20:84:2b:80:be:f0:85:ee:eb:46:
                    24:43:85:bf:ef:d8:e5:65:18:80:8f:08:ec:ae:09:
                    1d:26:8b:89:95:44:d0:2d:fe:70:24:6c:49:1a:8c:
                    39:8a:20:79:cb:ca:00:c3:8d:55:ff:e0:4d:97:2a:
                    da:79:a1:09:b1:3e:23:fd:21:74:41:bb:dc:45:7a:
                    41:28:22:ec:1c:e1:a1:9d:37:2a:88:bd:e7:b4:ce:
                    d0:55:4a:47:36:92:e8:48:18:8d:c9:30:ac:3a:a9:
                    e8:3d:62:53:90:7b:15:8b:97:3a:1d:45:76:4c:16:
                    97:f8:f9:f9:4e:90:6c:49:b6:46:e5:14:54:5e:3a:
                    07:df:c1:c4:2a:c7:ef:4b:a2:4d:5b:6f:76:6b:6e:
                    1c:0e:9f:09:1d:dd:20:b0:f2:aa:9e:09:be:58:bb:
                    b9:66:97:47:ad:12:14:a5:ee:51:8b:d1:4f:83:cc:
                    87:98:2d:aa:ea:6e:ba:76:eb:7a:28:06:2b:1d:d3:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7C:E8:AC:F5:47:B6:09:7B:0C:20:80:0B:87:95:5A:84:F1:FD:B4
            X509v3 Authority Key Identifier:
                keyid:00:24:F2:64:6B:A4:21:06:40:73:16:FE:59:A0:CD:2A:76:EF:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/0024F2646BA42106407316FE59A0CD2A76EF240C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0024F2646BA42106407316FE59A0CD2A76EF240C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD574A6F238C0DC117A8A08D48C369062CCC0A8A913C98072EB717961E739809/0/323830333a663264303a31613a3a2f34382d3634203d3e20323734303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2d0:1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:be:e4:ee:17:5e:05:16:d7:6e:f6:de:65:82:92:43:00:8a:
         ad:bd:b9:7c:f0:ed:60:5c:c0:53:89:14:9b:68:1c:c6:df:1a:
         64:9d:58:36:82:bd:aa:e3:8c:1f:aa:9d:c1:63:01:64:48:05:
         eb:eb:35:0a:da:de:84:15:cb:92:23:fc:44:95:a6:d9:d2:ad:
         4a:09:5f:08:b5:39:2b:8a:02:02:62:c4:d5:1b:ea:61:cd:88:
         2b:48:51:75:fb:20:16:e9:eb:cd:11:47:2f:ab:a4:8b:13:05:
         14:a0:f1:04:ec:bb:79:85:7e:ba:21:e6:33:a3:05:a1:20:f4:
         27:73:b0:95:8a:24:46:8b:d8:62:b3:09:79:a5:c7:0a:60:35:
         ee:3d:ad:42:55:20:a9:3a:c8:9f:54:12:57:d4:15:af:89:58:
         9c:04:a3:a1:73:ee:06:42:93:bf:9e:13:36:b4:b2:de:d1:0e:
         4d:0b:6c:fc:f0:48:29:81:81:73:63:f2:84:40:01:1e:92:20:
         33:e0:ab:ce:a4:4c:fc:0c:36:8a:16:52:54:2e:7e:77:1a:af:
         8f:94:c5:87:d8:12:74:ff:57:b3:00:3e:63:f0:b2:bb:44:be:
         2f:c1:61:11:6e:a8:10:a1:9f:c2:f5:19:a5:3d:3e:fa:e6:98:
         56:75:65:de
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUOyGnuWZDHtX25QoreAgufIhbRf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAyNEYyNjQ2QkE0MjEwNjQwNzMxNkZFNTlBMENEMkE3
NkVGMjQwQzAeFw0yNTA3MTYyMDI1MDFaFw0yNjA3MTUyMDMwMDFaMDMxMTAvBgNV
BAMTKDIxN0NFOEFDRjU0N0I2MDk3QjBDMjA4MDBCODc5NTVBODRGMUZEQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNb+cL++cWSolwmk5FMwWPpLXV
qJ6v2PqvlTHnHeCULnX6qT+AuasX4r4nH/l25yvysMQGnVVXrri/E1fh05WAIIQr
gL7whe7rRiRDhb/v2OVlGICPCOyuCR0mi4mVRNAt/nAkbEkajDmKIHnLygDDjVX/
4E2XKtp5oQmxPiP9IXRBu9xFekEoIuwc4aGdNyqIvee0ztBVSkc2kuhIGI3JMKw6
qeg9YlOQexWLlzodRXZMFpf4+flOkGxJtkblFFReOgffwcQqx+9Lok1bb3ZrbhwO
nwkd3SCw8qqeCb5Yu7lml0etEhSl7lGL0U+DzIeYLarqbrp263ooBisd06JxAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUIXzorPVHtgl7DCCAC4eVWoTx/bQwHwYDVR0j
BBgwFoAUACTyZGukIQZAcxb+WaDNKnbvJAwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDU3NEE2RjIzOEMwREMxMTdBOEEwOEQ0OEMzNjkwNjJD
Q0MwQThBOTEzQzk4MDcyRUI3MTc5NjFFNzM5ODA5LzAvMDAyNEYyNjQ2QkE0MjEw
NjQwNzMxNkZFNTlBMENEMkE3NkVGMjQwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDI0RjI2NDZCQTQyMTA2NDA3
MzE2RkU1OUEwQ0QyQTc2RUYyNDBDLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQ1NzRBNkYyMzhDMERDMTE3QThBMDhENDhDMzY5MDYyQ0NDMEE4QTkx
M0M5ODA3MkVCNzE3OTYxRTczOTgwOS8wLzMyMzgzMDMzM2E2NjMyNjQzMDNhMzE2
MTNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMyMzczNDMwMzYzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgD8tAAGjANBgkqhkiG9w0BAQsFAAOCAQEADb7k7hdeBRbXbvbeZYKSQwCKrb25
fPDtYFzAU4kUm2gcxt8aZJ1YNoK9quOMH6qdwWMBZEgF6+s1CtrehBXLkiP8RJWm
2dKtSglfCLU5K4oCAmLE1RvqYc2IK0hRdfsgFunrzRFHL6ukixMFFKDxBOy7eYV+
uiHmM6MFoSD0J3OwlYokRovYYrMJeaXHCmA17j2tQlUgqTrIn1QSV9QVr4lYnASj
oXPuBkKTv54TNrSy3tEOTQts/PBIKYGBc2PyhEABHpIgM+CrzqRM/Aw2ihZSVC5+
dxqvj5TFh9gSdP9XswA+Y/Cyu0S+L8FhEW6oEKGfwvUZpT0++uaYVnVl3g==
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:19 2025 by rpki-client